IT Risk & Compliance Leader (SME) – Drive Risk & Controls

Sammons Financial Group Companies; West Des Moines (IA); On-site; USD 84,721 - 176,501; Full time

Benefits offered by this job

Health coverage

ESOP

401(k) plan

Friday afternoons off

Paid time off

Job summary

Sammons Financial Group Companies is seeking an IT Risk and Compliance professional to provide risk consulting across the IT function, identify, monitor, and report IT risk, and help develop risk management methodologies. You will mentor analysts and support IT Security and Risk Management to ensure regulatory compliance.

You will implement IT risk assessment processes, train IT staff, develop IT controls, and collaborate with auditors. Strong leadership and communication are essential.

Qualifications

• Bachelor's Degree in Business, Computer Science, IT, Risk Management or related field preferred.
• Minimum 10 years' experience in risk management, information security and/or internal controls including IT Auditor/IT Security Analyst roles preferred.
• Broad knowledge of Information Risk Management concepts and application to business.
• Knowledge of information security domains, risk assessment, and regulatory requirements.

Responsibilities

• Provide IT Risk and Compliance SME support for the IT Risk and Compliance team.
• Develop and implement IT risk management methodologies and assessment processes.
• Mentor IT Risk and Compliance analysts and train IT staff in risk assessments.
• Develop and implement IT risk and security policies and controls framework.
• Monitor information risks, reporting to IT Management and ensuring regulatory compliance.
• Collaborate with auditors and internal stakeholders to improve risk posture.

Skills

Risk management

Information security

IT risk assessment

Regulatory compliance

Auditing collaboration

Mentoring

Policy development

Education

Bachelor's Degree in Business, Computer Science, IT, Risk Management or related field

Job description

Sammons Financial Group Companies is seeking an IT Risk and Compliance professional to provide risk consulting across the IT function, identify, monitor, and report IT risk, and help develop risk management methodologies. You will mentor analysts and support IT Security and Risk Management to ensure regulatory compliance.

You will implement IT risk assessment processes, train IT staff, develop IT controls, and collaborate with auditors. Strong leadership and communication are essential.